Merge branch '7.9' into main

2020-08-27 15:54:44 -08:00
parent 779a3a5b0d 4ffdc46ba7
commit aec3ec31b9
76 changed files with 225 additions and 150 deletions
@@ -7,6 +7,7 @@ updated_date = "2020/08/03"
 [rule]
 author = ["Elastic"]
 description = "Identifies a suspicious parent child process relationship with cmd.exe descending from PowerShell.exe."
+from = "now-9m"
 index = ["winlogbeat-*", "logs-endpoint.events.*"]
 language = "kuery"
 license = "Elastic License"